Analysis

  • max time kernel
    148s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/01/2024, 16:18

General

  • Target
    657a748c87d1cabb04a6354023b0754e.exe
  • Size 138KB
  • Sample240118-tsbqlsdgd6
  • SHA256 44fd0d51c6be55932888d801a5a1f520018973e8207cdb56f5db198d8b69bdb5
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Executes dropped EXE 1 IoCs
  • Drops file in Windows directory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\657a748c87d1cabb04a6354023b0754e.exe
    "C:\Users\Admin\AppData\Local\Temp\657a748c87d1cabb04a6354023b0754e.exe"
    1⤵
    • Drops file in Windows directory
    PID:1584
  • \??\c:\windows\help\winhelp.exe
    c:\windows\help\winhelp.exe
    1⤵
    • Executes dropped EXE
    • Drops file in Windows directory
    PID:2076

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        winhelp.exe

        • Path C:\Windows\Help\winhelp.exe
        • Size 32KB
        • SHA256 d674aa30310ca720d4cb70bfed0de826ff4106914a170dbfc93934c192f72369
        • MD5 SHA1 SHA512 SSDEEP

        winhelp.exe

        • Path \??\c:\windows\help\winhelp.exe
        • Size 84KB
        • SHA256 d9c2419ce416dff4880252a39bba63aa52ff25fa229fcc8aedbb31f26ef81b41
        • MD5 SHA1 SHA512 SSDEEP